ZDI-CAN-27430 HIGH 7.8 Overdue Jul 09, 2025

Docker

Docker is a widely-used containerization platform that enables developers to package and deploy applications in isolated environments. This HIGH severity vulnerability requires local access with user-level privileges and involves complex attack conditions, but if exploited successfully could compromise system confidentiality, integrity, and availability across multiple security boundaries. Security teams should monitor for exploitation attempts targeting Docker installations and prepare patches ahead of the November 6, 2025 deadline, particularly in environments where untrusted users have local system access.

Advisory Details
Researcher Discovered by: Nitesh Surana (niteshsurana.com) & Nelson William Gamazo Sanchez of Trend Research
Reported July 09, 2025
Deadline November 06, 2025 161d overdue
CVSS Vector AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy